Post #2280150
2026-05-09 07:18 UTC
@jpmens@mastodon.social "particularly when the absence of the DS record must be ‘proven’ for an unsigned child zone."
I wonder when and how often a resolver checks for the presence of the DS in a parent zone. Because it escalated very quickly
Replies (1)
-
@winfried@fosstodon.org 2026-05-09 07:36
@jpmens@mastodon.social I guess for nonexistent DS RRs it's the 'minimum' of the de. SOA RR which is 2h. But resolvers may have shorter overwrites.